quantity-digital/acf-read-only

Release historydanger

The package has six releases, but none in the last 12 months; its latest release was published about seven years ago. This long period without a release materially increases abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's roughly seven-year release gap. This is the strongest concern despite the repository remaining available.

Maintainerscaution

Only one account has registry publish access, which is a limited operational base. The organization backing makes a short registry maintainer list less concerning, but it does not compensate for the observed lack of recent activity.

Repo toolingcaution

The repository uses Composer, giving it basic ecosystem-appropriate build tooling, but it has no reported security scanning tools. This is a modest transparency and maintenance gap rather than a severe risk.

Repository archivedcaution

The linked repository is not archived, which means it remains structurally available for maintenance. However, its last push was about seven years ago, so the non-archived status only partly offsets the inactivity evidence.